IN THE SPECIFICATION 

On page 5 of the specification, please replace the paragraph at lines 7-10 with the 
following amended paragraph: 

The computer system 14 is a desktop or laptop PG personal computer (PCX which is 
configured to communicate to the WAN 12, the Internet for example. PCs, such as the computer 
system 14, normally access the Internet through an Internet Service Provider (ISP), Application 
Service Provider (ASP), or the like. 

On page 6 of the specification, please replace the paragraph at lines 4-15 with the 
following amended paragraph: 

Such functions as addressing the mobile device 22, encoding or otherwise transforming 
messages for wireless transmission, or other necessary interface functions are performed by the 
wireless network gateway 16. The wireless network gateway 16 may be configured to operate 
with more than one wireless network 20, in which case the wireless network gateway 16 also 
determines a most likely network for locating the mobile device 22 and possibly tracks mobile 
devices as users roam between countries or networks. Although only a single wireless network 
gateway 16 is shown in Fig. 1, mobile devices are often configured to communicate with more 
than one gateway, such as a corporate network gateway and a WAP Wireless Application 
Protocol (WAP) gateway, for example. Alternatively, private wireless network gateways such as 
wireless Virtual Private Network (VPN) routers could be implemented to provide a private 
interface to a wireless network. A wireless VPN implemented in the LAN 18 provides a private 
interface from the LAN 18 to one or more mobile devices such as 22 through the wireless 
network 20 without requiring the wireless network gateway 16. 
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On page 9 of the specification, please replace the paragraph at lines 5-11 with the 
following amended paragraph: 

The memory 32 is, or at least includes, a writeable store such as a RAM random acc ess 
memory (RAM) into which other device components write data. Software applications that have 
been installed on the remote device 30 are stored in the software applications store 34. These 
software applications include one or more software applications through which a computer 
network, such as the LAN 18 in Fig. 1, is remotely accessible, and possibly software applications 
that communicate with other entities or manage on-device functions. Software applications may 
also perform more than one type of function and remotely access more than one computer 
network. 

Please replace the paragraph that begins on page 10, line 22 with the following amended 
paragraph: 

The interface/connector 56 provides an alternate communication path to a PC or other 
device having a co-operating interface or connector. The interface/connector 56 could be any of 
a plurality of data transfer components, including, for example, an optical data transfer interface 
such as an Infrared Data Association (IrDA) port, some other short-range wireless 
communications interface, or a wired interfaces such as serial or Universal Serial Bus (USB) 
port. Known short-range wireless communications interfaces include, for example, "Blue tooth 2 
BLUETOOTH® modules and 802.1 1 modules. It will be apparent to those skilled in the art that 
Bluetooth 1'i 1 1. i < H > 1 1 U and 802.1 1 denote sets of specifications, available from the Institute 
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of Electrical and Electronics Engineers (IEEE), relating to wireless LANs and wireless personal 
area networks, respectively. Therefore, a communication link established via the 
interface/connector 56 may be a wireless connection or a physical wired connection. 

Please replace the paragraph that begins on page 25, line 1 7 with the following amended 
paragraph: 

The authentication system 204 checks whether there is authorization to provide 
authentication information to the remote device 200. The authentication system 204 uses the 
supplied identity information to make the authorization check. If the authorization check 
succeeds, then the authentication system 204 provides the authentication information to the 
remote device 200. When the remote device 200 is to access the computer resources 202, the 
remote device's two-factor code generator 202 210 generates based upon the authentication 
information the access data that is needed to gain access to the computer resources 202. 

On page 32 of the specification, please replace the paragraph at lines 9-18 with the 
following amended paragraph: 

The detailed design of the communication subsystem 511, such as frequency band, 
component selection, power level, etc., is dependent upon the communication network 519 in 
which the mobile device 500 is intended to operate. For example, a mobile device 500 intended 
to operate in a North American market may include a communication subsystem 5 1 1 designed to 
operate with the Mobitex or DataTAC mobile data communication networks and also designed 
to operate with any of a variety of voice communication networks, such as AMP-S Adva nced 
Mobile Phone System (AMPS) . TDMA, CDMA, PCS, etc., whereas a mobile device 500 
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intended for use in Europe may be configured to operate with the GPRS data communication 
network and the GSM voice communication network. Other types of data and voice networks, 
both separate and integrated, may also be utilized with the mobile device 500. 

Please replace the paragraph that begins on page 35, line 19 with the following amended 
paragraph: 

An exemplary application module 524N that may be loaded onto the mobile device 500 is 
a MM personal, information manager (PIM) application providing PDA functionality, such as 
calendar events, appointments, and task items. This module 524N may also interact with the 
voice communication module 524A for managing phone calls, voice mails, etc., and may also 
interact with the data communication module 524B for managing e-mail communications and 
other data transmissions. Alternatively, all of the functionality of the voice communication 
module 524A and the data communication module 524B may be integrated into the PIM module. 

On page 38 of the specification, please replace the paragraph at lines 11-14 with the 
following amended paragraph: 

A short-range communications subsystem 540 is also included in the mobile device 500. 
For example, the subsystem 540 may include an infrared device and associated circuits and 
components, or a Bluetooth BLUETOOTH® or 802.11 short-range wireless communication 
module to provide for communication with similarly-enabled systems and devices. 

Please replace the paragraph that begins on page 41, line 9 with the following amended 
paragraph: 
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Message servers such as 820 normally maintain a plurality of mailboxes 819 in one or 
more data stores such as 817 for each user having an account on the server. The data store 817 
includes mailboxes 819 for a number of ("n") user accounts. Messages received by the message 
server 820 that identify a user, a user account, a mailbox, or possibly another address associated 
with a user, account or mailbox 819 as a message recipient are stored in the corresponding 
mailbox 819. If a message is addressed to multiple recipients or a distribution list, then copies of 
the same message are typically stored to more than one mailbox 819. Alternatively, the message 
server 820 may store a single copy of such a message in a data store accessible to all of the users 
having an account on the message server, and store a pointer or other identifier in each 
recipient's mailbox 819. In typical messaging systems, each user accesses his or her mailbox 
819 and its contents using a messaging client such as Microsoft Outlook- MICROSOFT 
OU TLOOK® software or Lotus Notes LOTUS NOTES® software , which normally operates on 
a PC, such as the desktop computer system 822, connected in the LAN 806. Although only one 
desktop computer system 822 is shown in Fig. 9, those skilled in the art will appreciate that a 
LAN will typically contain many desktop, notebook and laptop computer systems. Each 
messaging client normally accesses a mailbox 819 through the message server 820, although in 
some systems, a messaging client may enable direct access to the data store 817 and a mailbox 
819 stored thereon by the desktop computer system 822. Messages may also be downloaded 
from the data store 817 to a local data store (not shown) on the desktop computer system 822. 
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